Over $31 Million Stolen from Humanity, Is the Team Behind It Paving the Way for a New Project?

Odaily星球日报发布于2026-06-09更新于2026-06-09

文章摘要

The article reports a major security incident involving Humanity Protocol (H), resulting in over $31 million stolen. The team attributes the hack to a private key leak from a Humanity Foundation member, leading to a rapid sale of H tokens and a 90% price drop. However, prominent on-chain investigator ZachXBT suggests the event might be an "exit scam" orchestrated by the team, rather than an external hack. This suspicion is fueled by the team's controversial history, including past management failures, legal issues, and previous scandals like outsourced technology and problematic airdrops. Further investigation reveals that the core team behind Humanity is already involved with a new project called "Everything," which recently secured funding. This has led to community speculation that the alleged hack is a deliberate scheme to abandon the H project while shifting focus and resources to their new venture, leaving investors to bear the losses. The article questions whether this is a genuine security failure or a premeditated "rug pull" strategy.

Original | Odaily Planet Daily(@OdailyChina)

Author | Wenser(@wenser 2010)

When it rains, it pours. The crypto market has once again been hit by a major security incident with over $30 million in stolen funds.

In the early hours this morning, on-chain monitoring showed that the Humanity Protocol was hacked, with over 17 wallets holding H tokens compromised, resulting in total losses exceeding $19 million. Subsequently, the scale of the lost funds expanded to over $31 million. After the successful attack, the hacker quickly swapped the H tokens for ETH to facilitate subsequent money laundering.

Terence, the founder of Humanity, later confirmed that the incident was due to the private key of a Humanity Foundation member being leaked and exploited by hackers. Following this news, the price of the H token plummeted below $0.08, with a 24-hour drop of over 90%.

Against the backdrop of a minor rebound in the broader market, the "bear market staple" has played out once again. Is it hackers being unpreventable, or is there more to the story?

When a "Human-Induced Security Incident" Occurs at Humanity: Team Member Private Key Leak OR Project Team's Deliberate Plot?

According to the latest official response from Humanity, project founder Terence confirmed that the private key of a Humanity Foundation member had been leaked. As a precaution, please do not interact with cross-chain bridges or any liquidity pools until safety is confirmed. The Foundation is working with security experts and exchange partners to handle the matter and will provide ongoing updates. Furthermore, the official advises users to temporarily revoke permissions granted to the project's contract addresses until the official investigation results are disclosed.

Meanwhile, the "hack" continues. According to LookonChain monitoring, the Humanity hacker minted an additional 100 million H tokens on BSC, valued at $11.4 million, indicating that the sell-off may continue.

As of the time of writing, the address associated with the Humanity hacker holds over 31.35 million H tokens, valued at approximately $3.82 million; holds about 18,000 ETH, valued at over $30.11 million; its BNB holdings have also increased to 2,443, worth nearly $1.5 million; and it continues to mint more H tokens.

On-chain address monitoring information for the hacker can be found at: https://arkm.com/explorer/entity/dcfac174-1b67-46d6-8cab-5b8e955ca921.

Regarding this major security incident with over $30 million in stolen funds, on-chain detective ZachXBT also offered his preliminary investigation conclusions:

He first posted, "Unclear if hack or team maliciously rugged. Looking at the chart and the concentrated supply, the H team was likely working with an active market maker. However, all H tokens were sold on (on-chain) DEXs, not CEXs."

Subsequently, he gave a preliminary conclusion, stating: "This 'security incident' was likely planned. I don't believe the team's corresponding story at all; it's just an excuse made by ill-intentioned people to get away." It's worth mentioning that the Humanity project team does indeed have a "dark history."

Humanity Team's Dark History: Technical Outsourcing, Airdrop Drama, and Team Scandals

In fact, the crypto community's dissatisfaction with Humanity is not without reason.

Previously, when WorldCoin gained fame as a "human iris identity verification project," Humanity, as a "palm print verification identity security protocol," quickly capitalized on the hot concept and rose to prominence. At that time, it was highly sought after as a partner for KYC or identity verification in numerous crypto project airdrops. However, on the other hand, its background team, its promoted "palm print security verification technology," and its token airdrop process all sparked market controversy. For more details, see "From Palm Print 'Revolution' to Access Control Manufacturer, Tearing Apart Humanity's Two-Faced 'Technological' Charade."

Not only that, in June last year, on-chain investigator Specter pointed out in a post: "After understanding the team composition of Humanity, it's concerning: Among the 4 team leaders, 3 have problematic past records involving mismanagement, lawsuits, or financial irregularities."

Among them, project founder and CEO Terence Kwok has a previous "entrepreneurial history." He founded Tink Labs, which once raised $200 million and reached a peak valuation of $1.5 billion, but ultimately went bankrupt in 2019 due to "mismanagement."

Foundation head Mario Nawfal has previously been accused of withholding wages and is implicated in improper financing, false promises, and coercing whistleblowers into silence. He also has a series of "blemished histories": the project Froothie was fined in Australia for false advertising; sued by Juicero; accused of invoice manipulation during his tenure at NFT Tech; and engaged in controversial behavior with BitClout token trading.

As for Yat Siu, founder of Animoca Brands, one of Humanity's backers, he was previously involved in violations related to blockchain and crypto investments, leading to his company being delisted from the Australian Securities Exchange.

Coupled with Humanity's past incidents being exposed, such as "Shenzhen technical outsourcing," large-scale sybil attacks in token airdrops, and airdrops worth single-digit amounts for loyal users, this theft incident is hard not to be seen as having ulterior motives.

Appearing Hacked, Actually a Golden Cicada Shedding Its Shell? Humanity Team Accused of Already Shifting to a New Project

Soon, more information was revealed by the crypto community and on-chain detective ZachXBT.

After suggesting that the Humanity theft might be a planned event, ZachXBT again posted, questioning Humanity's official account: "You chose to hype your token for weeks without any real substance and think the crypto community would blindly believe your story? Please disclose all your active market-making agreements with related entities in Hong Kong first."

Subsequently, he even shared a previous tweet from crypto KOL Irene Zhao, which mentioned: "2 years ago, I made a 100x return on my KOL round investment in H tokens; now, I have also participated in the KOL round financing for Everything, a new project incubated by the Humanity team."

In January this year, Everything, which promotes the concept of an "all-in-one exchange," announced the completion of a $6.9 million seed round. The round was led by Humanity's venture capital arm, Humanity Investments, with participation from Animoca Brands, Hex Trust, WallStreetBets creator Jamie Rogozinski, and Three Point Capital. The platform emphasizes its advantage in integrating perpetual contracts, spot markets, prediction markets, and payment functions.

Looking at it now, it's a familiar taste (combining current hotspots), a familiar recipe (similar investor team composition). Often, we have to admire the keen sense and superb execution of these "entrepreneurial veterans." As for the KOLs and investors involved, perhaps all benefits have already been divided behind the scenes, leaving the losses for the token traders on stage.

Of course, in the crypto market, projects and token prices are always two sides of the same coin. As for how the H token price performs subsequently, it may still depend on the handling plan of the Humanity project team and the stage performance of the market makers.

相关问答

QAccording to the article, what was the official explanation given by the Humanity Protocol team for the massive security breach?

AThe official explanation, as confirmed by Humanity founder Terence, was that a private key belonging to a member of the Humanity Foundation was compromised and exploited by hackers.

QWhat was the estimated total loss from the Humanity Protocol attack as detailed in the report?

AThe estimated total loss from the attack exceeded $31 million. Initially, over 17 wallets holding H tokens were drained for over $19 million, and the scale later expanded to over $31 million.

QWho is ZachXBT and what was his preliminary conclusion about the nature of the incident?

AZachXBT is a well-known on-chain investigator. His preliminary conclusion was that the security event was likely a deliberate, man-made scheme, suggesting it was an exit strategy rather than a genuine hack.

QWhat new project is mentioned as being incubated by the Humanity team, according to the article?

AThe new project mentioned is called 'Everything', a platform described as an all-in-one exchange. It was announced in January and raised $6.9 million in seed funding, led by Humanity's venture arm, Humanity Investments.

QWhat are some of the alleged 'black histories' or past controversies associated with key members of the Humanity team mentioned in the article?

AThe article mentions several controversies: Founder Terence Kwok's previous venture Tink Labs collapsed due to mismanagement; Foundation lead Mario Nawfal allegedly had issues with unpaid wages, false promises, and questionable financial practices; and investor Yat Siu's company was delisted from the Australian Stock Exchange for irregularities in blockchain investments.

你可能也喜欢

微软CEO:在AI时代,如何定义一家公司的护城河?

微软CEO萨提亚·纳德拉认为,AI时代企业的核心竞争力并非依赖于单一的最强大模型,而在于能否构建一个持续进化的“学习闭环”。这一系统能将企业内部的工作流程、专业知识、组织判断和员工经验沉淀下来,并让人工智能与人类能力相互强化、共同提升。 未来的公司将积累两类关键资产:一是以员工知识、判断力、创造力和模式识别能力为核心的“人力资本”;二是企业自身构建并拥有的AI能力,即“Token资本”。纳德拉强调,AI不仅不会削弱人力资本的价值,反而会让人类的目标设定、跨领域连接和关键决策能力变得更为重要。缺乏人的引导,算力将失去方向;没有企业自身知识的注入,再强的模型也仅是外部工具。 因此,企业的真正护城河在于建立私有的评估体系、强化学习环境和知识库,将隐性经验转化为可迭代、可扩展的系统能力。即使更换底层通用模型,企业独有的“公司老员工式”的专业经验和学习成果也不会丢失。这确保了企业的知识产权与控制权。 纳德拉指出,健康的AI未来应是一个繁荣的“前沿生态”,而非由少数通用模型垄断价值。只有这样,价值才能广泛惠及每家公司、每个行业和国家,让各组织能基于自身知识创造并保留经济价值,最终实现企业、员工与社区的共同繁荣。

marsbit39分钟前

微软CEO:在AI时代,如何定义一家公司的护城河?

marsbit39分钟前

ZEC 联创回应 Orchard 漏洞:暂无被盗痕迹,将封存 Orchard 池

近期Zcash的Orchard模块曝出安全漏洞,引发了对代币总量是否异常及用户资产安全的两大关切。本文针对漏洞引发的四个核心问题进行分析。 首先,关于漏洞是否已被利用,目前尚无证据表明已被恶意使用。该漏洞由专业团队主动发现,门槛较高,且曝光后开发团队迅速冻结资金池并修复,极大限制了攻击窗口。历史经验表明,黑客获利后通常会快速变现并留下痕迹,目前尚未发现此类证据。 其次,关于Orchard内合法资产的取回,若漏洞从未被利用,用户资产可正常转出。但如果虚假代币已混入池中并抢先转出,则可能影响部分用户的取回。考虑到漏洞被利用的概率较低,将资产留在原隐私钱包内是稳妥选择。若选择转出,需注意转入公开地址会完全失去隐私性,转入Sapling池则依赖2018年的可信初始化仪式,存在额外安全隐患。 第三,目前用户无法自行验证Zcash代币总量是否被增发。但计划中的Ironwood网络升级将永久关闭Orchard池,只允许资产按原合法存入数量转出,从而从协议层面杜绝超发。升级后,任何用户均可通过运行节点独立验证总量。 最后,关于是否存在其他造假漏洞,多支团队(包括借助先进AI工具)已进行全面排查,目前未发现新的同类高危漏洞,但仍无法给出绝对保证。 总结来说,漏洞很可能未被利用,用户资产目前安全,且暂未发现其他类似漏洞。但关键问题在于用户目前无法自主验证总量,而Ironwood升级将解决此问题,恢复Zcash的可验证性基础。

Foresight News50分钟前

ZEC 联创回应 Orchard 漏洞:暂无被盗痕迹,将封存 Orchard 池

Foresight News50分钟前

交易

现货
合约
活动图片